Lucene search
+L

7322 matches found

OSV
OSV
added 2026/05/19 12:0 a.m.23 views

MAL-2026-3876 Malicious code in @antv/dw-random (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.11 views

MAL-2026-4119 Malicious code in @antv/xflow-core (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:0 a.m.9 views

MAL-2026-3889 Malicious code in @antv/f2 (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.12 views

MAL-2026-4047 Malicious code in @antv/l7-pass (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:0 a.m.12 views

MAL-2026-4007 Malicious code in @antv/gi-assets-scene (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:0 a.m.12 views

MAL-2026-3946 Malicious code in @antv/g-plugin-html-renderer (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.15 views

MAL-2026-3943 Malicious code in @antv/g-plugin-dragndrop (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.17 views

MAL-2026-4018 Malicious code in @antv/github-config-cli (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:0 a.m.15 views

MAL-2026-3950 Malicious code in @antv/g-plugin-physx (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References4
OSV
OSV
added 2026/05/19 12:0 a.m.11 views

MAL-2026-3880 Malicious code in @antv/expr (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.22 views

MAL-2026-3885 Malicious code in @antv/f-react (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.20 views

MAL-2026-3995 Malicious code in @antv/g6-react-node (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.9 views

MAL-2026-3970 Malicious code in @antv/g-webgpu-engine (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/19 12:0 a.m.14 views

MAL-2026-3906 Malicious code in @antv/f6-ui (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

5.8AI score
SaveExploits0References5
OSV
OSV
added 2026/05/18 7:44 a.m.9 views

SUSE-SU-2026:1940-1 Security update for curl

This update for curl fixes the following issues: Security issues fixed: - CVE-2026-4873: connection reuse ignores TLS requirement bsc1262631. - CVE-2026-5545: wrong reuse of HTTP Negotiate connection bsc1262632. - CVE-2026-6253: proxy credentials leak over redirect-to proxy bsc1262635. -...

7.5CVSS5.8AI score0.00719EPSS
SaveExploits5References13
Snyk
Snyk
added 2026/05/15 10:40 a.m.13 views

Malicious Package

Overview apple-cloud-infrastructure-monitor is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

9.8CVSS5.8AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/15 12:0 a.m.17 views

Nessus Network Monitor < 6.5.4 Multiple Vulnerabilities (TNS-2026-14)

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.5.4. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-14 advisory. - An integer overflow can be triggered in SQLite's concatws function. The resulting,...

9.8CVSS7.2AI score0.02254EPSS
SaveExploits13References21
Tenable Nessus
Tenable Nessus
added 2026/05/15 12:0 a.m.9 views

Microsoft Azure Monitor Agent < 1.14.0 Elevation of Privilege (CVE-2026-32204)

The version of Microsoft Azure Monitor Agent installed on the remote host is prior to 1.14.0. It is, therefore, affected by an elevation of privilege vulnerability: - External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally. An...

7.8CVSS5.8AI score0.00285EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/05/13 8:23 p.m.15 views

CVE-2026-42830

Untrusted search path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

6.5CVSS5.8AI score0.00474EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/05/13 8:22 p.m.15 views

CVE-2026-32204

External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00285EPSS
SaveExploits0References1
Rows per page
Query Builder